Описание
Security update for lcms2
This update for lcms2 fixes the following issues:
- CVE-2018-16435: A integer overflow was fixed in the AllocateDataSet function in cmscgats.c, that could lead to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. (bsc#1108813)
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15
liblcms2-2-2.9-3.3.1
liblcms2-devel-2.9-3.3.1
Ссылки
- Link for SUSE-SU-2018:3498-1
- E-Mail link for SUSE-SU-2018:3498-1
- SUSE Security Ratings
- SUSE Bug 1108813
- SUSE CVE CVE-2018-16435 page
Описание
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15:liblcms2-2-2.9-3.3.1
SUSE Linux Enterprise Module for Basesystem 15:liblcms2-devel-2.9-3.3.1
Ссылки
- CVE-2018-16435
- SUSE Bug 1108813